Director, Cybersecurity Regulatory Engagement (1LOD)

About the role

Archer is collaborating with BNY to fill the Director, Cybersecurity Regulatory Engagement (1LOD) position. The role sits within Cybersecurity Governance, Risk & Controls (CGRC) as an individual contributor aligned with the First Line of Defense (1LOD) mandate. It manages and executes cybersecurity regulatory engagement activities — exams, inquiries, remediation, new guidance, and regulatory requests — by coordinating inputs, supporting control alignment, and driving disciplined execution. The position reports to the Director of Cyber Regulatory Engagement and is based in New York, NY.

Responsibilities

• Regulatory Engagement Execution
  • Execute end‑to‑end cybersecurity regulatory engagements, including regulatory exams, supervisory meetings, remediation activities, and requests for information (RFIs).
  • Coordinate globally with cybersecurity process owners, control owners, and subject matter experts to deliver accurate, consistent, and regulator‑ready responses.
  • Partner closely with Engineering Controls, Technology Risk (2LOD), Internal Audit (3LOD), and other cross‑functional stakeholders to ensure coordinated and well‑governed regulatory execution.
  • Reinforce a risk‑aware culture through disciplined 1LOD execution.
• Regulatory Response Management
  • Drive the development of high‑quality regulatory submissions by coordinating input across control owners, subject matter experts, and technical teams.
  • Reinforce direction and expectations for clear, accurate, and consistent cybersecurity regulatory responses.
  • Review, challenge, and approve key regulatory responses to ensure alignment with the firm’s cybersecurity posture and risk appetite.
  • Contribute to a centralized regulatory response repository, leveraging AI‑enabled capabilities to improve response quality, consistency, and reuse.
• Stakeholder Management & Communication
  • Prepare executive‑level briefings, materials, and talking points for senior management, including materials for senior management committees and boards.
  • Partner with Engineering Controls, Risk, Compliance, Legal, and Internal Audit leadership throughout regulatory engagements.
  • Provide status updates and analysis to cybersecurity leadership.
• Team Leadership, Process Improvement & Reporting
  • Provide leadership, coaching, and oversight to supporting team members.
  • Maintain accurate regulatory engagement tracking, documentation, and artifacts in accordance with CGRC governance standards.
  • Contribute to continuous improvement of regulatory engagement playbooks, job aids, and execution routines.
  • Support reporting and metrics to provide transparency into regulatory risk, themes, and engagement status.
• Risk & Control Alignment
  • Support the design, implementation, and assessment of controls addressing regulatory expectations.
  • Contribute to 1LOD risk and control taxonomies.
  • Identify control gaps, thematic issues, and systemic risks surfaced through regulatory engagements and partner with control owners to drive remediation.

Qualifications

• 12+ years of experience in cybersecurity, technology risk, governance, audit, controls, or related technology disciplines.
• Extensive experience in regulatory engagements, risk management, audit, or compliance within a large, complex, and highly regulated organization.
• Proven track record leading regulatory exams, supervisory interactions, or other types of regulatory engagements.
• Experience operating in a First Line of Defense (1LOD) role.